$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa File: 2b654b1b-1b20-4e58-b50d-f23964f25963.roa (raw, json) Hash identifier: moPff5Gq3ea01OM5oq24HhnpFAllpqgn/64TQJs6WxE= Subject key identifier: 29:9A:19:E7:3B:88:67:63:B5:21:BA:75:E6:EC:44:B3:6B:CB:AD:C2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 06601F36562287C0F2DF9AC90DB43DB6D3D8765D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa Signing time: Fri 13 Feb 2026 15:10:39 +0000 ROA not before: Fri 13 Feb 2026 15:10:39 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:60:1f:36:56:22:87:c0:f2:df:9a:c9:0d:b4:3d:b6:d3:d8:76:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Feb 13 15:10:39 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=82d1b9b7c9546b01e956885a81be693396f43e9a4ff0c999a251fcfc7d4f61d5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:d2:d7:13:a1:e5:19:74:64:93:4a:e8:24: 64:da:8d:d8:3c:be:d1:a7:1f:cb:9a:55:a9:d0:e5: 05:a1:58:64:9e:17:70:72:ab:30:17:98:29:35:8b: 04:69:ae:be:ed:75:1c:5e:17:3b:18:f9:b2:8a:c7: c7:6a:2f:fe:a8:3a:b5:af:35:0d:6d:93:45:17:26: a9:2e:f5:64:90:de:ea:c8:c2:13:8f:8f:5d:4f:ca: 24:ef:0b:3b:27:9c:13:ce:10:a5:ad:49:26:65:3f: 7e:a0:60:f4:96:c3:1b:28:58:7e:c4:65:fc:1b:66: e0:61:2b:b0:88:42:df:7a:53:7f:32:7e:e7:aa:92: ed:4d:9a:79:11:0c:c8:6a:d1:f9:6f:62:77:5e:22: 30:59:29:91:8d:aa:a4:20:59:10:1e:94:b2:86:51: 1c:b2:c6:cb:75:50:e6:b8:2d:00:b9:66:5b:3e:47: 5b:1d:fa:9d:ac:f2:d9:3b:f3:76:5f:4c:0d:5d:21: 9e:35:cd:a9:36:68:14:e9:54:75:93:66:92:4b:76: e3:4e:3a:e2:db:b5:57:84:31:79:7b:c7:0e:4e:55: 41:a0:20:6e:3a:d5:dd:fb:03:c7:c2:be:3c:d4:61: ca:84:5c:75:26:fe:00:72:29:87:6b:f3:54:60:5e: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:19:E7:3B:88:67:63:B5:21:BA:75:E6:EC:44:B3:6B:CB:AD:C2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6115::/48 Signature Algorithm: sha256WithRSAEncryption 7f:02:97:ec:9d:72:f2:bf:d2:e8:fb:ae:dc:a0:32:30:e0:4a: 37:54:8c:e9:6f:2a:3c:cf:9a:bd:06:0c:b3:15:10:63:21:5d: 91:81:b9:8f:71:c2:6d:2c:94:69:b6:ff:6b:a2:44:ef:30:df: 6e:8e:89:b5:84:8f:a3:b5:f9:b8:e5:e3:74:cb:0b:c4:c0:0a: 9c:00:b6:e5:20:50:0c:3c:f3:4e:83:a3:bd:51:de:76:d9:b5: fb:7a:58:9a:33:ae:77:6e:c1:e0:dd:47:d6:81:1a:d1:6e:fa: 12:41:4d:ff:14:66:0d:18:51:26:c4:bd:97:71:e6:30:32:4d: 66:43:d2:71:d7:9f:93:0d:4a:91:d9:82:1c:fc:5e:a9:fd:ad: dd:52:ee:b6:15:2d:49:83:18:80:7a:ef:ce:dd:f7:ac:10:74: 74:4f:ec:82:f1:f4:cd:d1:bc:7b:f0:c2:ef:19:37:41:f7:b9: da:57:05:00:07:b1:fb:f8:59:82:a9:da:05:25:75:7b:e5:ef: bb:36:e1:50:31:f5:c8:02:1b:f4:99:05:4d:96:22:69:57:f4: ee:f1:62:5c:7d:4d:4d:04:a3:d2:49:78:c8:45:1a:e2:b1:aa: 71:0c:4d:26:19:5b:91:f0:6c:09:04:86:b8:a5:80:50:79:22: d2:17:eb:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBmAfNlYih8Dy35rJDbQ9ttPYdl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDM5WhcNMjYwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmQxYjliN2M5NTQ2YjAxZTk1Njg4NWE4MWJlNjkzMzk2 ZjQzZTlhNGZmMGM5OTlhMjUxZmNmYzdkNGY2MWQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjfdLXE6HlGXRkk0roJGTajdg8vtGnH8uaVanQ5QWhWGSe F3ByqzAXmCk1iwRprr7tdRxeFzsY+bKKx8dqL/6oOrWvNQ1tk0UXJqku9WSQ3urI whOPj11PyiTvCzsnnBPOEKWtSSZlP36gYPSWwxsoWH7EZfwbZuBhK7CIQt96U38y fueqku1NmnkRDMhq0flvYndeIjBZKZGNqqQgWRAelLKGURyyxst1UOa4LQC5Zls+ R1sd+p2s8tk783ZfTA1dIZ41zak2aBTpVHWTZpJLduNOOuLbtVeEMXl7xw5OVUGg IG461d37A8fCvjzUYcqEXHUm/gByKYdr81RgXtmzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKZoZ5zuIZ2O1Ibp15uxEs2vLrcIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiNjU0YjFiLTFiMjAtNGU1OC1iNTBkLWYyMzk2NGYyNTk2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRUwDQYJKoZIhvcNAQELBQADggEBAH8Cl+ydcvK/0uj7rtygMjDg SjdUjOlvKjzPmr0GDLMVEGMhXZGBuY9xwm0slGm2/2uiRO8w326OibWEj6O1+bjl 43TLC8TACpwAtuUgUAw8806Do71R3nbZtft6WJozrnduweDdR9aBGtFu+hJBTf8U Zg0YUSbEvZdx5jAyTWZD0nHXn5MNSpHZghz8Xqn9rd1S7rYVLUmDGIB6787d96wQ dHRP7ILx9M3RvHvwwu8ZN0H3udpXBQAHsfv4WYKp2gUldXvl77s24VAx9cgCG/SZ BU2WImlX9O7xYlx9TU0Eo9JJeMhFGuKxqnEMTSYZW5HwbAkEhrilgFB5ItIX65w= -----END CERTIFICATE-----Generated at Sun Mar 1 22:16:47 2026 by rpki-client